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Why  do  Risk  Management? 


Why  do  Risk  Management? 


“ There  is  only  one  reason  for  risk  management: 

To  assure  the  program  decision-makers  learn  about  and 
deal  with  important  risks  before  they  turn  into  issues 
-  Carnegie  Mellon  University  “Risk  Management 
Overview  for  TACOM” 


Benefits  of  Risk  Management  include: 

•  Risk  is  a  proactive  approach  -  preventing  problems  before  they  occur. 
Issue  management  is  a  reactive  approach  -  fixing  issues  that  exist. 

•  Understanding  your  risks  and  putting  measures  in  place  to  prevent  issues 

-  doing  it  right  the  first  time. 

• Minimize  or  prevent  cost  overruns,  schedule  delays,  and  performance 
problems 

•  Product  and  design  quality  are  improved. 

•  Maximizing  usage  of  resources. 

•  Promoting  teamwork  and  system  engineering. 

•  Communication  to  stakeholders  and  decision  makers. 


vs.  Issue 

A  risk  is  something  that  has  a  likelihood  of  occurring  in 
the  future. 


An  issue  is  something  that  has  already  happened  or  will 
certainly  happen. 

A  risk  can  be  mitigated;  an  issue  must  be  corrected. 


Risks,  when  mitigation  is  unsuccessful,  become  issues 
after  an  event  has  occurred,  such  as  testing  (risk  -  “if 
testing  fails”,  issue  “testing  has  failed”),  a  date  where 
mitigation  was  required  by,  etc. 
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DoD  Risk  Management 


Risk 

Planning 


Risk 

Assessment 


Risk 

Handling/ 

Mitigation 


Risk 

Monitoring 


What  proiect/program  requires  Risk 

Management? 

•  Identify  baseline  for  cost,  schedule 
and  performance  for  the 
project/program. 

•  Create  Risk  Management  Plan  for  the 
project/program. 

•  Assign  roles  and  responsibilities  for 
the  project/program. 

•  Complete  risk  training  for  the 
project/program’s  Risk  IPT. 


RISK  DOCUMENTATION 


What  can  go  wrong? 

•  Study  WBS,  SOW, 
IMP/IMS,  EVM. 

•  Lessons  learned. 

•  Review  IPTs’  areas  of 
responsibility. 

•  Ask  “why”  multiple  times. 

How  big  is  the  risk? 

•  Consider  likelihood  of  root 
cause  occurrence. 

•  Identify  consequences  in 
(Cost,  Schedule,  and 
Performance). 


What  will  you  do  about  it? 

•  Eliminate  the  root  cause. 

•  Control  the  root  cause  or 
consequence. 

•  Transfer  the  risk. 

•  Assume  the  level  of  risk. 


How  are  things  going? 

•  Communicate  risks. 

•  Monitor  risks  plans. 

•  Review  status  through  event 
driven  technical  reviews  and  a 
risk  review  board. 

•  Review  watch  risks. 


How  is  the  planned  risk  mitigation  being 

implemented? 

•  Determine  planning  what  budget  & 
requirements  needed. 

•  Provide  a  coordination  vehicle  with 
management,  etc. 

•  Document  changes. 


This  is  a  iterative  process  for  new  risks. 
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Areas  to  Consider  for  Risk  Management 


Early  on  in  the  program,  a  Work  Breakdown  Structure  (WBS)  should  be  established. 

This  will  breakdown  the 

program  into  product  and  process  elements.  Examination  of  each  item  in  the  WBS  for  things  that  could  go  wrong  is 

inherent  to  risk  management.  Ask 

'Why,  Why,  Why..."  until  the  source  of  the  risk  in  uncovered. 

Have  all  the  functional  areas  been  consulted  for  potential  risk  items? 

-  Program  Management 

-  Sustainment 

-  Human  System  Int. 

-  Engineering 

-  Contractors/OEMS 

-  Safety 

-  Subject  Matter  Experts  (SMEs) 

-  Modeling  and  Simulation 

-  RAM  Support 

-  Systems  Engineering 

-  Testing 

-  Procurement 

-  Business  Management 

-  Logistics 

-  Contracting 

-  Survivability 

-  Government  Furnished  Equipment 

-  Financial  Management 

-  Quality 

-  Capabilities  Insertion 

-  Joint  Program  Office 

-  Survivability 

Project  Scope 

Resources 

Threat 

Schedule 

Technical 

Risk/Design 

Performance 

Processes 

Production 

Requirements 


Other  Areas  to 
Consider 


Software 


Life  Cycle 


Environmental 
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Risk  Management  Checklist 

Early  on  in  the  program,  a  WBS  should  be  established.  This  will  breakdown  the  program  into  product  and  process  elements. 

Examination  of  each  item  in  the  WBS  for  things  that  could  go  wrong  is  inherent  to  risk  management.  Ask  "Why,  Why,  Why...1 
until  the  source  of  the  risk  in  uncovered.  Other  items  that  should  also  be  examined  are: 

Have  all  the  functional  areas  been  consulted  for  potential  risk  items? 

Quality? 

Engineering? 

Logistics? 

Test? 

Budget? 

Program  Management? 

Environmental? 

Safety? 

Production? 

This  checklist  is  not  meant  as  an  all  encompassing  document,  but  rather  a  thought  starter  into  some  additional  questions  that  may  help  uncover  programmatic  risks. 


Resources: 

Is  the  project  sufficiently  staffed  (Engineers,  OEM  personnel.  Logistics,  PM,  etc.}?  What  are  the  risks  if  it  is  not? 
Are  funds  available  to  support  risk  management  resources  including  staff  and  tools? 

Does  the  government/contractor  have  an  adequate  amount  of  personnel  to  support  the  product/program? 

Is  the  qualification  of  the  personnel  assigned  to  support  the  product/program  adequate? 

Have  all  subject  matter  experts  been  consulted? 

Are  there  any  industrial  base  issues  that  introduce  risk? 

Are  there  any  resource  constraints  that  introduce  risk? 

Are  there  any  personnel  issues  that  introduce  risk? 

Are  there  any  training  needs  that  have  not  been  met  that  would  help  perform  risk  management? 


Project  Scope: 

Is  the  project  scope  well  understood  by  all  parties? 

Are  the  development  processes  well  defined? 

Is  the  supplier/OEM  involved  in  risk  identification  and  mitigation? 

Were  lessons  learned  from  similar  programs  reviewed  in  order  to  identify  potentially  related  risks? 
Has  a  Work  Breakdown  Structure  (WBS)  been  created  for  this  program? 

Is  there  a  configuration  management  plan  in  place? 


Acquisitio n  E .v ft  He n ce 


Unclassified 


USAF  TRL  Level  Calculator 
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AFRL  Transition  Readiness  Level  Calculator,  version  2.2 


Summary 


1  (§>  Use  Manufacturing 

1  O  No  Manufacturing 

Hide 
□  Blank 

Rows 

1  <§>  Use  Programmatics 

1  O  No  Programmatics 

%  Complete  is 
now  set  at: 

100% 

|  Yellow  set  point  is: 


Hardware  and  Software  Calculator 

O  Only  Hardware 

Technology  Readiness  Level  Achieved 

Technical: 

WTM\ 

O  Only  Software 

1  1  l  1  3  |  4  |  5 

’  6  7  8 

(§)  Hardware  &  Software 

Program  Name: 


Date  TRL  Computed: 


[Program  Manager: 


Comments:  | 


TOP  LEVEL  VIEW  --  Demonstration  Environment  (Start  at  top  and  pick  the  first  correct  answer) 

Reset  Top 
Level  View 

Has  an  identical  unit  been  successful  an  on  operational  mission  (space  or  launch}  in  an  identical  configuration? 

O 

Has  an  identical  unit  been  demonstrated  on  an  operational  mission,  but  in  a  different  configuration/system  architecture? 

O 

Has  an  identical  unit  been  mission  (flight)  qualified  but  not  operationally  demonstrated  (space  or  launch)? 

TRL  2  | 

o 

Has  a  prototype  unit  been  demonstrated  in  the  operational  environment  (space  or  launch}? 

o 

Has  a  prototype  been  demonstrated  in  a  relevant  environment,  on  the  target  or  surrogate  platform? 

0 

Has  a  breadboard  unit  been  demonstrated  in  a  relevant  (typical:  not  necessarily  stressing)  environment? 

o 

Has  a  breadboard  unit  been  demonstrated  in  a  laboratory  (controlled)  environment? 

o 

Has  analytical  and  experimental  proof-of-concept  been  demonstrated? 

o 

Has  a  concept  or  application  been  formulated? 

o 

Have  basic  principles  been  observed  and  reported? 

o 

None  of  the  above 

|  |  Source:  James  W.  Bilbro,  NASA,  Marshall  SFC.  May  2001|| 

H/SW 

1  H 

Both 

TRL  1  (Check  all  that  apply  or  use  slider  for  %  complete) 

B 

T 

00 

F 

"Back  of  envelope"  environment 

B 

T 

*  l  ► 

00 

F 

Physical  laws  and  assumptions  used  in  new  technologies  defined 

S 

T 

<  c  ► 

00 

F 

Have  some  concept  in  mind  that  may  be  realizable  in  software 

S 

T 

<  r  ► 

DO 

F 

Know  what  software  needs  to  do  in  general  terms 

B 

T 

< 

00 

Paper  studies  confirm  basic  principles 

Reset 
Level  1 


m  ►  n  1  Summary  J  TRL  Calculator  JL 

[Tf  i  1  i 

Ready 

|J -S 
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USAF  Risk  Identification,  Integration  and  lllities 


http://www.afit.edu/cse/page.  cfm?page=164&sub=95 


USAF 

Risk  Identification:  Integration  &  llities  (RI3)  Calculator  ven  a* 


Go  lo  Index 


Date-  Saved 

Clair  Program  iMomuitan  J  ci*ar  am  djtj 

Program 

Dale: 

ft/1/11 

UUE; 

was#: 

Evaluator' 

Sell 

Niiti**  Cham 

Ml 

□tit* 

IllllrS 

o«ign  Maturity  & 
Stiliblltty  &  Comp 

UC 

Ready 


Instructions  ( 


Save  Data 


Select 

Categories 

# 

First  Provide  Rationale  for  Risk  Assessment 

Then  Select  Appropriate  Cell  in  5X5  Chart  Then  ENTER 

Select 

Categories 

Design 
Maturity  & 
Stability 

Reliability 

Scalability  & 
Complexity 

....  1  If  the  question  is  not  applicable  click  "N/A"  M 

Maintainability 

To  cycle  through  the  questions  click  "1 

_ 

Links  to  Question  Sets 


Design 
Maturity  & 
Stability 


Scalability  & 
Complexity 

Integrabiity  | 

Software 

Development 

Reliability 

Human  Factors 

People,  1 
Organization  &l 
Skills 

llities  Roll-Up  | 


Links  to  LC  Charts 

Design  Maturity  8 
Stability  LC  Chari 

Scalability  & 

'  Complexity  LC 

Chart 

Integrabiity  LC 
Chart 

Testability  LC 
Chart 

Software 
Development 
LC  Chart 

Reliability  LC 
Chart 

Maintainability 
LC  Chart 

Human  Factors 
llities  LC  Chart 

People, 
Organization  & 
Skills  LC  Chart 
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Technica  Risk  Assessment 


Approach 


■  ^  40  Years  of 

I  Extedertfe  in  Analysis 


□  Step  1:  Gather  system  information  (WBS,  system  boundary,  development  plan,  etc.). 

□  Step  2:  Identify  critical  technologies  (need  to  be  delivered  for  the  system  to  work)  and  other 

technologies  of  interest. 


□  Step  3 

□  Step  4 

□  Step  5 

□  Step  6 

□  Step  7 


Gather/assess  TRL  for  each  technology  from  Step  2. 

Assess  manufacturing  readiness  (MRL)  of  each  technology. 

Assess  Integration  Readiness  Level  (IRL)  for  each  technology. 

Identify  potential  technical  risk  events  for  each  technology. 

Gather  historical  program  data  on  development,  integration  and  manufacturing. 


□  Step  8:  Assess  probability  distributions  for  each  technology:  TRL  7  by  MS  C;  MRL  8  by  MS 
C;  IRL  8  by  MS  C. 

□  Step  9:  Assess  the  consequence  to  performance,  schedule,  or  cost  if  technology  is  not 
delivered  within  the  timeframe  and  cost  targets. 


Steps  8  &  9  accomplished  during  Risk  Workshop 


□  Step  10:  Use  Monte  Carlo  simulation  to  determine  expected  likelihood  that  technologies  will 
not  be  delivered  within  the  timeframe  and  cost  target. 

□  Step  1 1 :  Use  DoD  risk  reporting  matrix  to  determine  risk  rating  for  each  technology. 

□  Step  12:  Perform  sensitivity  analysis  on  probability  distributions  and  consequence  levels. 


Assessment  will  include  a  risk  rating  for  each  technology,  an  explanation  of  risk  drivers,  possible 

risk  mitigations,  and  a  risk  comparison  across  the  alternatives. 


7  Sept  1 1 


UNCLASSIFIED 


Risk  Mitigation  Approaches 


Mitigation  Approaches 


Avoid:  Develop  a  strategy  to  avert  the  likelihood  and/or  consequence  by 

selecting  a  different  approach  or  not  pursuing  the  option  at  all. 
Consider  this  technique  when  multiple  design  or  programmatic 
options  are  available  (sometimes  “eliminate”) 


Transfer:  Develop  a  strategy  to  place  the  risk  with  the  party  most  able  to  do 
something  about  it. 


Assume:  Accept  consequences  of  the  risk,  with  frequent  monitoring  to 
determine  if  the  risk  actually  occurs,  and  that  the  impact  is  as 
predicted  (and  is  tolerable)  if  it  does.  Also  known  as  accept. 


Control:  Develop  a  strategy  to  lower  the  risk  by  reducing  its  likelihood, 

consequence,  or  both  components  with  tasks  in  the  IMS.  This 
approach  is  sometimes  referred  to  as  handle  or  mitigate. 


Monitor  and  periodically  re-evaluate  the  risk  for  change. 


Watch: 


Maximizing  Risk  Management  in  the  DoD 


&< 


Current  State  of  Risk  Management 


•  Risks  are  tracked  in  a  database  or  spreadsheet. 

•  Issues  are  tracked  in  a  database  or  spreadsheet. 

•  Failure  Mode  and  Effects  Analysis  (FMEAs)  may  or  may  not  be  required  by 
contract  and  access  to  them  and  use  of  them  may  be  limited. 


There  is  no  traceability  or  linkage  from  FMEAs, 
to  risks  and  mitigation  plans,  to  issue  resolution. 


FMEA 

(Failure  Mode  and 
Effect  Analysis) 


V. 


Risk  Management 


V 


Issue  Management 
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FMEA 

(Failure  Mode  and 
Effect  Analysis) 


J 


Product,  Process,  etc 
FMEA  identify  risks 
which  are  then  logged 
into  Risk  Recon 
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Risk  Mitigation  from 
Risk  Recon  trace  back 
and  populate  FMEA, 
new  RPN  numbers. 


X 


Risk  Recon 


When  a  risk  becomes 
an  issue,  user  can 
create  an  issue  in  the 
database  and  track  the 
corrective  action  plan. 
Issues  can  also  be 
entered  independently. 


1*10  J  r  1 


An  issue’s  corrective  action 

plan  or  path  forward  will 

likely  have  new  associated 

V 

risks,  which  can  be 

entered  and  traced  back  to 

original  risk  in  Risk  Recon. 

t 


\ 


-> 


Issue  Database 


Tie  all  systems 
together  and  have  one 
searchable  lessons 
learned  database. 


Lessons  Learned 


Acqitisifio  n  C  .v  ft  He  n  c 


ce 


16 


Why  a  program  should  begin  with  a  FMEA... 


FMEAs  are  an  excellent  way  for  a  program  to  shorten  design 
time ,  avoid  program  mistakes ,  and  deliver  a  higher  quality  system 
to  the  warfighter  in  reduced  time. 

FMEAs  should  be  required  for  systems  or  subsystems  via  the 
contract  They  should  be  readily  accessible  and  usable  by  the 
government. 
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FMEA  stands  for  Failure  Mode  and  Effect  Analysis.  Simply  translated,  it  means  that  through 
some  method  we  will  identify  how  something  can  fail  and  what  will  happen  if  it  does.  When 
done  correctly  it  can  be  an  expedient  and  thorough  approach  to  risk  identification. 

Some  definitions: 


1.  A  definition  of  "failure".... Failure  is  the  inability  to  produce  the  desired  output.  Failure 


may  occur  at  any  point  within  the  function  of  a  product  or  flow  of  a  process. 

2.  A  definition  of  "effect". ...Effects  are  the  result  of  failures.  The  effect  is  the  thing  we  are 
most  interested  in.  The  power  of  the  effect  will  dictate  our  level  of  action.  Not  every 
failure  will  result  in  a  severe  effect  and  therefore  not  every  failure  needs  to  be  addressed. 

3.  A  definition  of  "analysis"  ....Analysis  means  the  investigation  of  the  process  being  used 
such  that  it  can  be  determined  how  failure  occurs.  The  analysis  provides  identification  of 
the  potential  failures  and  then  serves  to  rate  their  effects  based  on  how  severe  they  are , 
how  often  they  might  occur,  and  how  easily  we  can  find  them, 


By  using  FMEA  we  can  eliminate  problems  BEFORE  they 
happen  and  save  time  and  money  on  prioritized  work. 


Without  a  thorough  ANALYSIS  of  the  EFFECTS  it 
is  difficult  to  assign  resources  efficiently. 


Unclassified 


Although  FMEA  is  FMEA  no  matter  its  application,  over  the  years  many  variations  on  the 
same  theme  were  stood  up  under  similar  names.  Here  are  some  of  the  most  popular 
categories: 


Design  FMEA  -  Helps  to  identify  how  something  can  fail  to  do  what  it  was  designed  to  do 
or  why  it  does  things  it  should  not  do 

•  Generates  too  much  heat 

•  Takes  too  long  to  accelerate 

•  Cannot  track  target 


Process  FMEA  -  Helps  to  identify  how  something  can  be  improperly  or  unsafely 
manufactured  or  assembled 

•  Parts  missing  after  assembly 

•  Improper  torque  on  fasteners 

•  Operator  must  put  self  at  risk  to  achieve  task 
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How  does  FMEA  work? 


Step  1  -  Understand  how  things  work  in  order  to  find  the  ways  it  can  fail. 

Use  proven,  thorough  approaches  to  describe  all  the  elements  of  the  process.  Work 
Breakdown  Structures  and  Process  Maps  are  popular  tools  for  this  purpose. 


Output 

Hot  dog  ready  for 
bun  placement 


Output 

Completed  hot 
dog  sub-assy 


Output 

Hot  dog  ready  to 
eat 


Inputs 

•  Grill  (hot) 

•  Hot  dog  (cooked) 

•  Tongs  (min  10  inch 
length) 


Inputs 

•  Bun  (fresh) 

•  Hot  dog  (still  hot) 

•  Tongs  (min  10  inch 
length) 


Inputs 

•  Ketchup  (Heinz) 

•  Mustard  (yellow) 

•  Onions  (chopped) 

•  Chili  (no  beans) 

•  Hot  dog  sub-assy 
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How  does  FMEA  work? 

Step  2  -  Execute  the  analysis  and  discover  the  potential  failures  and  effects, 
their  causes,  and  ultimately  what  to  do  about  it! 


Item  or  step  # 
from  WBS, 
Process  Map, 
or  other 

Process  step 
function  / 
requirements 

Potential  Failure 
Mode 

Potential  Effects 
of  Failure 

Severity 

Potential  Causes  / 
Mechanisms  of 
Failure 

Occurrence 

Current 

Process 

Controls 

Prevention 

Current 

Process 

Controls 

Detection 

Detect 

R.P.N. 

Recommended 

Actions 

Responsibility  & 
Target 

Completion  Date 

Action  Results 

Actions  Taken 

Severity 

Occur 

Detection 

R.P.N. 

1 

Remove  hot  dog 
from  qrill 

Hot  dog  is  not 
"readv" 

Delay:  customer 
hunqrv 

7 

Grill  is  not  hot 

1 

None 

Temperature  gauge 
on  qrill 

1 

7 

7 

Hot  dog  is  not  hot 
enough  (not 
cooked) 

4 

None 

Use  grill  marks  to 
indicate  fully 
cooked  status 

2 

56 

7 

Hot  dog  is 
overcooked  (burned) 

6 

None 

Use  grill  marks  to 
indicate  fully 
cooked  status 

2 

84 

Hot  dog  is  not 
present 

Major  delay: 
Customer  hungry, 
angry 

9 

Insufficient  hot  dog 
supplies,  ran  out 

7 

Educated  guess  on 
needs 

None 

10 

630 

Match  hot  dog 
count  to  guest 
list/update  shopping 
list 

G.  Ratajczak 

One  week  prior  to 
BBQ 

Shopping  list  and 
RSVP  list  kept 
together,  updated 
as  quests  call  in 

9 

7 

1 

63 

9 

failure  of  pre- 
process  steps  (grill 
prep) 

1 

None 

None 

2 

18 

2 

Place  hot  dog  in 

bun 

Hot  dog  not  in  bun 

Delay:  Rework  or 

qet  new  hot  doq 

7 

Operator  error, 
missed  bun 

1 

Hand/eye 

coordination 

None 

2 

14 

Hot  dog  incorrectly 
positioned  in  bun 

Dissatisfaction: 
Customer  will  have 
difficulty  eating,  or 
may  have  to  adjust 
hot  doq  manually 

5 

Operator  error,  poor 
placement 

2 

Hand/eye 

coordination 

None 

2 

20 

3 

Add  condiments 

Hot  dog  does  not 
meet  end  of  line 
requirements 
(condiments 
missinq) 

Minor  delay:  more 
work  needed 

3 

Favorite  condiment 
not  available  (not 
present) 

5 

None 

None 

10 

150 

Use  list  while 
shopping  to 
minimize 
mistakes/missing 
items 

G.  Ratajczak 
Two  days  prior  to 
BBQ 

Shopping  list  used 
at  store 

3 

5 

1 

15 

3 

Favorite  condiment 
not  available 
(condiment 
specifications  not 
met,  substitution 
used) 

9 

None 

None 

10 

270 

Request  condiment 
information  at 
RSVP 

G.  Ratajczak 

One  week  prior  to 
BBQ 

Guests  asked  about 
preferences  when 
they  call  to  RSVP 

3 

9 

1 

27 

Hot  dog  does  not 
meet  end  of  line 
requirements 
(unwanted 
condiments  added) 

Major  delay:  Scrap 
hot  dog.  start  over 

9 

Wrong  condiment 
added  to  hot  dog 

9 

None 

None 

10 

810 

Do  npot  apply 
condiments  until 
customer  is  present 

G.  Ratajczak 

Day  of  BBQ 

No  hot  dogs  "built" 
without  customer 
present 

9 

9 

1 

81 

Unclassified 
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How  does  FMEA  work? 

Item  or  step  # 
from  WBS, 
Process  Map, 
or  other 

Process  step 
function  / 
requirements 

Potential  Failure 
Mode 

Potential  Effects 
of  Failure 

Severity 

Potential  Causes  / 
Mechanisms  of 
Failure 

Occurrence 

Current 

Process 

Controls 

Prevention 

Current 

Process 

Controls 

Detection 

Detect 

R.P.N. 

Recommended 

Actions 

Responsibility  & 
Target 

Completion  Date 

Action  Results 

Actions  Taken 

Severity 

Occur 

Detection 

R.P.N. 

1 

Remove  hot  dog 
from  qrill 

Hot  dog  is  not 
"ready" 

Delay:  customer 
hunqrv 

7 

Grill  is  not  hot 

1 

None 

Temperature  gauge 
on  qrill 

1 

7 

7 

Hot  dog  is  not  hot 
enough  (not 
cooked) 

4 

None 

Use  grill  marks  to 
indicate  fully 
cooked  status 

2 

56 

7 

Hot  dog  is 
overcooked  (burned) 

6 

None 

Use  grill  marks  to 
indicate  fully 
cooked  status 

2 

84 

Hot  dog  is  not 
present 

Major  delay: 
Customer  hungry, 
angry 

9 

Insufficient  hot  dog 
supplies,  ran  out 

7 

Educated  guess  on 
needs 

None 

10 

630 

Match  hot  dog 
count  to  guest 
list/update  shopping 
list 

G.  Ratajczak 

One  week  prior  to 
BBQ 

Shopping  list  and 
RSVP  list  kept 
together,  updated 
as  guests  call  in 

9 

7 

1 

63 

9 

failure  of  pre- 
process  steps  (grill 
prep) 

1 

None 

None 

2 

18 

2 

Place  hot  dog  in 
bun 

Hot  dog  not  in  bun 

Delay:  Rework  or 
qet  new  hot  doq 

7 

Operator  error, 
missed  bun 

1 

Hand/eye 

coordination 

None 

2 

14 

Dissatisfaction: 

Hot  dog  does  not 
meet  end  of  line 
requirements 
(unwanted 
condiments  added) 

Major  delay:  Scrap 
hot  dog,  start  over 

9 

Wrong  condiment 
added  to  hot  dog 

9 

None 

None 

10 

810 

“3— 

specific 
met,  si 

ations  not 
ibstitution 

— 5 — 

None 

None 

"37 JT 

information  at 
RSVP 

One  week  prior  to 
BBQ 

preferences  whe 
they  call  to  RSV 

n 

P 

^3“ 

“T* 

“3“ 

“37“ 

1  Hot  dog  does  not  I 
j  iphjt  end  Ml  lip 
(  requirements 
(unwanted 

llllllllllllBlllllllllUllllllllll 

Major  delay:  Scrap 

1  hot  dog  start  over 1 

9 

|  Wrong  condiment  | 

1  added  to  hot  dog  1 

mill 

None 

(Ifciiijel 

|  |fu|  1 

1  81  li  | 

Do  npot  apply 
condiments  until 
:ustomer  is  present 

G.  Ratajczak 

Day  of  BBQ 

No  hot  dogs  "built” 
without  customer 
present 

9 

9 

i 

81 

9  x  9  x  10  =  810  !!!  The  analysis  says  this  failure,  along  with  its 
severe  effect,  is  not  only  likely  to  happen,  but  we  currently  have  no 

way  to  deal  with  it! 
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Item  or  step  # 
from  WBS, 
Process  Map, 
or  other 

Process  sj^^^ 
funcy^  j  ^ 

tt 

an't  address  every  failure  -  only 
le  most  important  ones.  Where  do 

Current 

v  Process 

j  Controls 

Prevention 

L  u  rrent 

Process 

Controls 

Detection 

Detect 

R.P.N. 

C>~ —  /  draw  the  line?  How  do  1  decide 

sphere  to  focus  resources?  ^ 

9 

None 

None 

10 

810 

\ • 

Jlog  is  not 
^present 

Major  delay: 
Customer  hungry, 
angry 

9 

Insufficient  hot  dog 
supplies,  ran  out 

7 

Educated  guess  on 
needs 

None 

10 

830 

3 

/CJcRonoirTients 

^lot  dog  does  not 
meet  end  of  line 
requirements 
(condiments 
missing) 

Minor  delay:  more 
work  needed 

3 

Favorite  condiment 
not  available 
(condiment 
specifications  not 
met,  substitution 
used) 

9 

None 

None 

10 

270 

3 

Add  condiments 

Hot  dog  does  not 
meet  end  of  line 
requirements 
(condiments 

Minor  delay:  more 
work  needed 

3 

Favorite  condiment 
not  available  (not 
present) 

5 

None 

None 

10 

150 

1 

Remove  hot  dog 
from  grill 

Hot  dog  is  not 
"ready" 

Delay:  customer 
hungry 

7 

Hot  dog  is 
overcooked  (burned) 

6 

None 

Use  grill  marks  to 
indicate  fully 
cooked  status 

2 

84 

1 

Remove  hot  dog 
from  grill 

Hot  dog  is  not 
"ready" 

Delay:  customer 
hungry 

7 

Hot  dog  is  not  hot 
enough  (not 
cooked) 

4 

None 

Use  grill  marks  to 
indicate  fully 
cooked  status 

2 

58 

2 

Place  hot  dog  in 
bun 

Hot  dog  incorrectly 
positioned  in  bun 

Dissatisfaction: 
Customer  will  have 
difficulty  eating,  or 
may  have  to  adjust 
hot  doq  manually 

5 

Operator  error,  poor 
placement 

2 

Hand/eye 

coordination 

None 

2 

20 

1 

Remove  hot  dog 
from  grill 

Hot  dog  is  not 
present 

Major  delay: 
Customer  hungry, 
anqry 

9 

failure  of  pre- 
process  steps  (grill 
prep) 

1 

None 

None 

2 

18 

2 

Place  hot  dog  in 
bun 

Hot  dog  not  in  bun 

Delay:  Rework  or 
qet  new  hot  doq 

7 

Operator  error, 
missed  bun 

1 

Hand/eye 

coordination 

None 

2 

14 

1 

Remove  hot  dog 
from  qrill 

Hot  dog  is  not 
"ready" 

Delay:  customer 
hunqry 

7 

Grill  is  not  hot 

1 

None 

Temperature  gauge 
on  qrill 

1 

7 

Unclassified 


When  and  why  should  we  use  FMEA? 


Manage  RISK  or.... 
NOW! 


Deal  with 
FAILURE  later 


PREVENT  failure  from 
occurring  or  minimize  its 
effect  by  acting 
PROACTIVELY.  Focus  your 
efforts  on  the  critical  few 
items  worth  pursuing. 
Ensure  SUCCESS  by 
minimizing  cost  and 
reducing  risk. 


Lack  of  ANALYSIS  leads  to 
inefficient  problem 
identification.  Resources 
can  be  quickly  expended 
addressing  incorrect  or 
insignificant  concerns.  The 
most  severe  failures  may 
still  happen  and  will  always 
cost  more  to  address 
reactively. 


Unclassified 


Successful  FMEA  exercises  result  in  very  complete  risk  identifications.  In  turn,  risk 
management  is  more  successful  in  eventually  reducing  the  failures  which  were  identified  as 

the  most  influential. 


BIG 
SAVINGS 


SUMMARY: 

1.  FMEA  is  not  hard  to  do  or  understand 

2.  FMEA  works  on  EVERYTHING 

3.  FMEA  is  the  BEST  way  to  identify  risk 

4.  Managing  risk  early  SAVES  MONEY! 


ARE  YOU  USING  FMEA?  CAN  YOU  AFFORD  NOT  TO? 


Use  it  proactively 
to  prevent  failures 

Explore  the  design  and  the  processes  of 
manufacturing  and  assembly  to  find  the 
potential  failures 

Use  the  knowledge  to  put  controls  in  place 
Eliminate  or  diminish  failures 
Save  time  and  money 


Use  it  reactively  to 
solve  problems 

Interrogate  the  FMEA  for  similar  or  exact 

failures 

Use  the  knowledge  to  put  solutions  in 

place 

Eliminate  or  diminish  failures 
Save  time  and  money 
Use  FMEA  for  root  cause  analysis 


Update  existing  FMEAs  with  lessons  learned 
and  provide  the  basis  for  FAILURE  FREE  next 

generation  ideas 


What  is  Risk  Recon? 


Risk  Recon  is  a  risk  management  tool  jointly  developed  by 
Program  Executive  Office  (PEO)  Ground  Combat  Systems  (GCS) 
and  the  Tank  Automotive  Research ,  Development  and 
Engineering  Center  (TARDEC)  for  risk  management. 

The  tool  provides  an  easily  accessible  database  for  PEO,  PMs 
and  organizations  to  store  and  share  information  in  one 
centralized  location.  This  provides  greater  opportunity  for  lessons 
learned. 


A  eg  u  i  si  ti  on  G  .v  re  Hen  re _ , 

27 


Risk  Recon  -  Risk  Management  Tool 

Capabilities 


Ease  of  Use  -  training  takes  approximately  1  hour. 


Lessons  Learned 


•  Imbedded  Reporting 

•  Integrated  Process  Flow. 

•  Traceability 

•  Accessibility 

•  Customization 

•  No  Cost-  Since  Risk  Recon  is  owned  by  the  US  Army,  there  is  no  program  cost  for 
using  this  database  for  DoD  organizations. 


Acqnisitio  ti  U  .\Yt  He n  c 
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Risk  Management  Process  Workflow 
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Approval  authority  for  High,  Medium  and  Low  Risks  resides 
with  Risk  Owners  (over  65  risk  leads) 


Unclassified 
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Consequence  Guidance 

(Available  in  Risk  Recon  under  “Help”  and  “Tip  Sheet”) 


Q) 

W  5 


T3 

O 

O 

£ 

"53 

£ 

□ 

Near 

Certainty 

Highly 

LT 

JU  1 

Moderate 

3 

% 

O.  ! 

Law 

2 

s 

y* 

Nat 

Lltely 

Negligible 

Marginal 

Moderate 

3 

Critical 

4 

CaLKbrc-r^nic 

5 

Consequence 

“Knowing  our  risks 
provides  opportunities 
to  manage  and 
improve  our  chances 
of  success. " 

-Roger  Vanscoy 


Consequence  Table 

Rating/Descriptfon 

Performance 

Cost 

Schedule 

5  (Catastrophic)  - 
Jeopardizes  an  exit 
criterion  of  current 
acquisition  phase 

Unacceptable-  No  viable 
alternatives  exist 

Program  budget  impacted 
by  10%  or  more;  Program 
success  jeopardized 

Key  events  or  milestones 
delayed  by  more  than  one 
month 

4  (Critical) 

Potentially  fails  Key 
Performance 
Parameter  (KPP) 

Unacceptable; 

Significant  changes 
required 

Program  budget  impacted  by 
5%-1G%,  Significant  portion 
of  program  management 
reserves  must  be  used  to 
implement  workarounds 

Critical  path  activities  2 
weeks  late;  Workarounds 
would  not  meet  milestones. 
Program  success  in  doubt 

3  (Moderate)  Shorts 
a  critical  mission 
need  but  expect 
no  breech  of  KPP 
threshold 
requirements 

Below  goal:  Moderate 
changes  required: 
Alternatives  would 
provide  acceptable 
system  performance; 
Limited  impact  on 
program  success 

Budget  impacted  by  1%-5%; 
Limited  impact  on  program 
success:  Does  not  require 
significant  use  of  program 
cost  and  or  schedule  reserves 

N on -critical  path  activities 
one  month  late;  Workarounds 
would  avoid  impact  on 
critical  path;  Limited  impact 
on  program  success 

2  (Marginal) 

Requires  the 
com mitment  of  a 
minor  portion  of  the 
program  cost 
schedule  or 
performance  reserve 

Below  goal  but  within 
acceptable  limits:  No 
changes  required: 
Acceptable  alternatives 
exist:  Minor  impact  on 
program  success 

Budget  impacted  by  1%  or 
less;  Minor  impact  on 
program  success;  Minor 
comm  Itment  of  prog  ram 
management  reserves 
(schedule,  cost)  used  for 
workarounds 

N  on -critical  path  activities 
late;  Workarounds  would 
avoid  impact  on  key  and 
non-key  milestones;  Minor 
impact  on  program  success; 
Development  schedule  goals 
exceeded  by  1%-5% 

1  (Negligible) 

Remedy  will  require 
minor  cost  schedule 
and/or  performance 
trades 

Requires  minor 
performance  trades 
within  the  threshold  - 
objective  range; 

No  Im  pact  on 
program  success 

Budget  not  dependent  on 
the  issue;  No  impact  on 
program  success.  Cost 
increase  can  be  managed 
within  program  plan 

Schedule  not  dependent 
on  issue;  No  impact  on 
program  success;  Schedule 
adjustments  managed 
within  program  plan 

Terms 

Definitions 

Risk 

A  measure  of  future  uncertainties  in  achieving  program  performance  goats  and 
objectives  within  defined  cost  schedule  and  performance  constraints.  Risk  addresses 
the  potential  variation  in  the  planned  approach  and  suspected  outcome. 

Issue 

An  event  that  has  already  occurred  or  has  100%  likelihood  of  occurring. 

Likelihood 

Probability  that  the  risk  will  occur  (based  on  ratings  1-5). 

Consequence 

Effector  impact  on  the  program  if  risk  becomes  an  issue  (based  on  ratings  1-5). 

UNCLASSIFIED:  Dist  A.  Approved  for  public  release.  #20015 
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Version:  E,0-  MaylOlD 

Home  Administration  Reports  Hew  Users  Help  User:  Lisa  Graf 

Project:  HBCT Teal Org  >  HBCT Tsst  PMO  >  HBCT  Training  >  H  BCT  Training  >  SKH  Testing 


Classified  data  must  net  be  stored  in  this  risk  management  tool 


Edit  Risk:  Training  Example  -  Loss  of  Power  in  Thunderstorms 
Workflow  Location:  Risk  Lead  Analysis 


Back  t-c  the  Home  Page 


View  History 


Save  Cancel 


submit  |  To  Close,  select  Risk  Status 


Close  Risk  Watch  Risk 


Risk  Info  Sheet 


Documents 


Risk  Info  Team 


Mitigation  Plan (s) 


Related  Projects 


Risk  Lifecycle 


m 


Changes  must  be  Saved  first  before  navigating  off  this  web  page 


Risk  Analysis  (Click  bar  to  eip  a  nd/contract) 


Risk  ID: 

User  Defined  Risk  ID  : 
Risk  Title: 


1698 


Training  Example  -  Loss  of  Power  in  Thunderstorms 
Candidate  ▼ 


Urgent: 

Check  to  alert  Risk  Manager  of  tame  sensitive 


□ 


Open  Date: 

Last  Saved  On  Date: 
WBS  #: 

IMP/IMS  #: 
Functional  -Groups: 
Risk  Lead: 


2/8/2010 


I  3/2/2010  3:17:29  PM 


Configuration  Management,  Eng  T 
Graf.  Lisa  ▼  4 

*  required  field 


Acquisitio  n  E  .v  ft  He  nee 
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•  Filling  out  the  risk  information  is  p 
easy. 

•  Initial  risk  input  takes  <  5 
minutes. 

•  Additional  time  required  for 
mitigation  steps. 


-  Create  a  Risk  Title. 

-  Confirm  Open  Date. 

-Enter  WBS  #,  IMP#  if 
applicable. 

-  Check  Functional  Groups  that 
may  be  affected  by  the  risk. 
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File  Edit  View  Favorites  Tools  Help 
\4‘  $*'  ' Administration  -  Risk  Info 


1  2  3  4  5 


Consequence 


■^i-  T  E!  w  T  lj?  Rage  ▼  Tools  ▼ 


•  The  Risk  Matrix  has  three  Risk 
Ratings: 

•  Original 

•  Current 

•  Residual 


Original  Consequence  (O): 

(4)  Critical  ▼  * 

Original  Likelihood  (O): 

(4)  Highly  Likely  ▼  # 

Current  Consequence  (C): 

(4)  Critical  ▼  # 

Current  Likelihood  (C): 

[2}  Low  Likelihood  ▼  # 

Residual  Consequence  (R): 

(2)  Marginal  ▼ 

Residual  Likelihood  (R): 

(1)  Not  Likely  ▼ 

Risk  Impacts 

Cost: 

m 

Schedule: 

m 

Performance: 

m  s 

Other: 

□ 

Affects  the  Critical  Path: 

□ 

Acqu  i  sitio  n  U  x  re  He  nee 


•  Select  Risk  Impacts: 

•  Cost 

•  Schedule 

•  Performance 

•  Other 

•  Critical  Path 
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Administration  -  Risk  Info 


n  T  E3  T  T  ^  £ase  T  T°o|&  T 


Done  [  Administration  -  Risk  Info  -  Windows  Internet  Explorer  |  kt  Local  intranet  |  Protected  Mode:  Off  ^100%  T 


Acquisitio  n  U  x  n  i/e  nee 
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Changes  must  be  Saved  first  before  navigating  off  this  web  page 


Summary  [Click  bar  to  expand/contract] 


Mitigation  Plan  ID: 


107 


Name: 


Date: 


Last  Saved  On  Date: 


Risk  Mitigation  Method: 


Risk  Review  Frequency: 


Mitigation  Plan  Lead: 


Mitigation  Plan  Summary  (Plan 
uview  and  desired  end  state: 
residual  risk.): 

Desired  End  State.  In  Risk  Assessment, 
Residual"  Risk. 


Bury  Power  Lines 


In  Risk  Review  Board 


6/4/2010  11:30:43  AM 


Control 


Daily 


Graf:  Lisa 


T  * 


required  field 


The  goal  of  the  mitigation  strategy  is  to  put  in  long  term  and  short  term  plans  to  reduce  the  risk  of 
losing  power  so  that  the  end  state  is  that  power  will  only  be  lost  for  a  maximum  of  three  hours  at  a 
time  (the  new  requirement). 


Mitigation  Plan  Details  [Click  bar  to  expand/contract) 


Mitigation  Steps  [Click  bar  to  expand/contract) 


Step 

Mitigation 

Due  Date 

Completion  Date  Status 

New  Consequence 

New  Likelihood 

Step  Owner 

[Edit] 

01 

Purchase  a  home  generator 

3/1/2010 

Complete 

[4)  Critical 

[2]  Low  Likelihood 

Barb  Dmoch 

\em] 

02 

Conduct  power  outage  survey. 

3/4/2010 

Complete 

[4)  Critical 

(3)  Moderate 

Lisa  Graf 

[*§ 

03 

Conduct  power  outage  root  cause  analysis 

3/8/2010 

Complete 

[4]  Critical 

[3]  Moderate 

Shawn  Haase 

[Edit] 

04 

Determine  new  reqmtfor  max.  downtime  allowed. 

3/10/2010 

Complete 

[4)  Critical 

[3]  Moderate 

Cheryl  R^ett^ 
Matt  Sheehy 

\em] 

05 

Conduct  land  availability  survey 

3/12/2010 

Complete 

[4)  Critical 

[3)  Moderate 

[“*] 

06 

Determine  requirements  for  burying  power  lines. 

3/15/2010 

In  Progress 

[4)  Critical 

[3]  Moderate 

Mike  Olsem 

f^l 

07 

Formulate  and  present  plan  to  management  for  approval. 

3/17/2010 

In  Progress 

[4)  Critical 

[3]  Moderate 

Mike  Baker 

08 

Bury  the  power  lines,  complete  job. 

3/31/2010 

Not  Started 

[2]  Marginal 

[1]  Not  Likely 

Mark  Manara 

d*] 

09 

Demonstrate  that  time  to  repair  of  main  line  is  <3  hours. 

4/1/2010 

Not  Started 

[2]  Marginal 

[1]  Not  Likely 

Brian  Graham 

[Edd] 

10 

Monitor  area  for  5  years  to  determine  how  effective  the  plan  has  gone. 

4/29/2015 

Not  Started 

[2]  Marginal 

[1]  Not  Likely 

Donna  Brady 

Mitigation  Plan  Table: 
-Includes  steps  for 
mitigation. 

-  Indicates  who  is 
responsible  and  due 
dates. 

-  Shows  the  risks  level 
accomplished  with  each 
step. 


Delete 


Delete 
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Risk  Recon  Reports 
Detailed  Risk  Report  -  Excel 


Risk  Recon  -  Detailed  Risk  Report  (FOUO) 


HBCT  Test  Org  /  HBCT  Test  PMO  /  HBCT  Training  /  HBCT  Training  /  testthree 


Current 

Status  Con/Lik  Impact  Risk  Title 

i  C/S/P/O  -  Hitting  a  deer 


Description  of  Risk 
Condition 


Context 


4/4 


Baselined 


4/2 


C/S/P 


Training  Example  - 
Loss  of  Power  in 
Thunderstorms 


IF  a  driver  hits  a  deer  THEN 
their  new  car  MAY  be 
damaged. 


If  there  is  a  thunderstorm  with 
high  winds  and  lightning 
strikes  occur,  then  loss  of 
power  to  homes  make  occur 
and  people  may  be  without 
power. 


The  is  a  potential  of  hitting  a 
deer. 


Mitigation  -  Rational  for 
Choosing  that  Mitigation 
Consequence  if  Realized  Plan 


If  a  thunderstorm  occurs  and 
high  winds  in  excess  of  60 
mph  occur  (WHAT),  then 
power  lines  may  come  down 
due  to  high  winds  (HOW)  and 
loss  of  power  may  occur 


Damage  to  a  car. 


If  power  is  lost  in  a  storm 
then  homes  will  not  have 
power.  This  can  lead  to  loss 
of  food  in  the  refrigerator 
(COST),  alarm  clocks  that 
don't  work  and  people  may  be 


1.  Add  additional  fog  lamps 
to  vehicle  by  Jan.  1;  2010 

2.  Add  anti-deer  sound 
emitting  devide  to  vehicle. 

3.  Avoid  roads  at  night  and 
counter  daylight  risk  with  anti- 
deer  sound  emitting  device  to 
vehicle. 


Mitigation  Plans  include: 
NOTE  -  the  person  writing 
this  risk  bought  a  generator 
to  temproarily  reduce  the  risk 
of  power  loss.  This  reduces 
the  current  risk,  but  is  only  a 


•  Risks  can  also  be  exported  into  an  Excel  spreadsheet. 

•  This  allows  for  easy  sorting,  searching  and  customization 
for  reports. 

•  User  can  also  customize  and  save  their  own  excel  formats 
for  download  for  the  next  time  a  report  is  run. 


ngi  hi  in  ilj  sLiikes.  i  ms  can 
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Risk  Ranking  and  Pie  Chart 
Summaries  and  Historical  Comparisons 


Summarize  Risk  Status  (Matrix)  Report  (FOUO) 


Level  1 '  HBCT  Test  Org 
Level  2:  All 
Level  3:  All 
Level  4:  All 
Project;  All 

Summarize  of  Risk  Status 
3/2/2010 


Risk  Assessment  Status  (Pie  Chart)  Report  (FOUO) 


Level  1 :  HBCT  Test  Org 
Level  2  AH 
Level  3;  All 
Level  4:  All 
Project:  AJI 


Risk  Assessment  Status  (7/1/2010) 


Risk  Assessment  Status  (8/2/2010) 


9 


W 


Report  current  as  of  8/2/2010  4:27:35  PH 


•  Risks  for  a  particular  folder  or  a  total  program  team  can  be 
depicted  with  risk  matrix  summaries  or  pie  charts. 

•  Historical  comparisons  between  dates  can  also  be  done. 
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Risk  Recon  Reports 
Risk  Information  Sheet 


Risk  Information  Sheet  (FOUO) 


Risk  Title :  Loss  of  Power  in  Thun derstorms 
User  Defined  ID: 

Status:  Baselined 
Unique  ID  #:  659 

Opened  Date:  a2/D8/2Q1D 
Last  Saved  D  ate :  021D812Q  1 D 

Risk  Lead:  Graf,  Lisa 


Risk  Information  Team  Members 


Risk  Assessment 


Risk  Information  Sheet  (FOUO) 


Current  Mitigation 
Plants )  for  this 
Risk: 


Rationale  for 
choosing 
Mitigation  Plan(s|: 


Applied  to 
Risk 

Plan  Name 

Status 

X 

Bury  Power  Lines 

|ln  Development 

Mitigation  Plans  include:<br/> 

NOTE  -  the  person  writing  this  risk  bought  a  generator  to  temproarily  reduce  the  risk  of  power 
loss.  This  reduces  the  current  risk,  but  is  only  a  temporary  interim  mitigation  steps.<br/> 

Final  Mitigation  Plan:<br/> 

1 .  Surveying  the  power  outage  database  for  areas  that  experience  high  power  loss.<br  /> 

2.  Conducting  a  root  cause  analysis  for  the  highest  risk  area  as  to  what  the  reason  is  for  the  power 
outages.  (NOTE  -  root  cause  determined  to  be  wind  damage  in  a  high  wind  corridor). <br  f> 

3.  Determine  what  the  new  requirements  are  for  system  performance  (how  many  outages  a  year,  for 
how  many  hours  and  due  to  what  root  cause  is  acceptable)  {NOTE  -  it  was  determined  that  only 
routine  maintenance  downtime  was  deemed  acceptable  for  less  than  3  hours). <br  /> 

4.  Path  forward  was  determined  to  be  to  bury  the  power  lines.<br/> 

F,  tn  f.nn due  nrirl  Fiiirvftv  Hi  d R-*nr  i hr  if  frrar.fimfint  Innrl  is  nunilrahlfi  tp  bury  the  lines.  (NOTE  - 

pment).<br/> 


•  The  “Risk  Information  Sheet”  contains  the  majority  of  the 
information  for  the  risk  including  the  description  of  the  risk, 
context,  consequences  and  mitigation. 

•  It  can  be  exported  into  an  Acrobat  .pdf  file,  Excel,  CSV,  etc 


Risk  Impacts: 


Consequence 

Cost 
X  Schedule 
X  Performance 
Other: 

Description  of  If  there  is  a  thunderstorm  with  high  winds  and  lightning  strikes  occur  (hen  loss  of  power  to  homes 
Risk  Condition:  make  occur  and  people  may  be  without  power. 

Context:  If  a  thunderstorm  occurs  and  high  winds  in  excess  of  60  mph  occur  {WHAT),  then  power  lines  may 

come  down  due  to  high  winds  (HOW)  and  loss  of  power  may  occur  (WHAT).  If  lightning  strikes  occur 
(WHAT),  then  transformers  may  be  hit  and  damaged  (HOW)  and  loss  of  power  may  occur 
(WHAT).  This  may  occur  because  power  lines  are  exposed  to  the  environment  (WHY)  and  subject 
wind  damage  and  lightning  strikes.  This  can  affect  home  and  people  {WHO)  subdivision  wide  or  to 
any  building  in  the  area  that  the  power  system  supplies  power  to  {WHERE). 

Consequence  if  If  power  is  lost  in  a  storm  then  homes  will  not  have  power.  This  can  lead  to  loss  of  food  in  the 

Realized:  refrigerator  (COST),  alarm  clocks  that  don't  work  and  people  may  be  late  to  their  jobs  (SCHEDULE) 
and  worrying  about  failed  systems  such  as  sump  pump  systems  {PERFORMANCE)  may  cause 
performance  issues  at  work  to  (hose  affected. 


2M1/2Q1Q  9:01:12  AM 


Page  1  of  2 


rptRisklnfoSheet 
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cqif 
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wer  tower  to  the  ground, 
the  main  line  could  be 
impact  of  loss  of  power. 


Close-Out 

Rationale: 


Mitigation  Steps  for  the  applied  Plan 


1 

Step 

Mitigation 

Due  Date 

Status 

New  Con. 
Level 

New  LFk. 
Level 

Step  Owner 

1 

Purchase  a  home  generator 

aarai/atn 

Complete 

4  -  Critical' 

2  -  Low  Likelihood 

Barb  Dmoch 

to 

Monitor  area  for  5  years  to  celermine  how  effect  ve 
the  clan  has  gone 

04-2912015 

Not  Started 

2  -  Marginal 

1  -  Not  Likely 

Donna  Brady 

2 

Conduct  power  outage  survey. 

03/04/2010"! 

Complete 

4  -  Critical 

3  -  Moderate 

Lisa  GraF 

3 

Conduct  power  outage  real  cause  analysis 

□3.'oa.,2mri 

[Complete 

4  -  Critical 

3  -  Moderate 

Shawn  Haase 

4 

Determine  new  neqml  for  mast  downtime  allowed. 

03/10/2010 

Complete 

4  -  Critical 

3  -  Moderate 

Cheryl  Rassette 

5 

Conduct  land  availability  survey 

03/12/2010 

Complete 

4  -  Critical 

3  -  Moderate 

Matt  Gheehy 

0 

Detem  ne  require  men  Is  for  burying  power  1  nes. 

03/1 5/2 0 1 0 

|  In  Progress 

4  -  Critical 

3  -  Moderate 

Mike  Oteem 

7 

Formulate  ana  present  plan  to  management  for 

approval. 

03/17/2010 

In  Progress 

4  -  Critical 

3  -  Moderate 

Mike  Baker 

3 

Bury  the  power  lines,  complete  job. 

03/31/2010 

Not  Started 

2  -  Marginal 

1  -  Not  Likely 

Mark  Mazzara 

9 

Demonstrate  that  time  to  reparr  of  main  line  s  <3 
hours. 

0401/2010 

Not  Started 

1 

2  -  Marginal 

1  -  Not  Likely 

Brian  Graham 

2/11/2010  9:01:12  AM 
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Risk  Recon  Reports 
Waterfall  Chart/Burn  Down  Chart 


Risk  Waterfall  Report  (FOUO) 

Risk  ID:  1665 

Risk:  Systems  E  rtgineenng  (SE) 

Workshop 

Description  of  Risk  Condition:  If  we  do  not  property  plan  for  the  SE  Workshop,  then  we  may  not  market  our  SE  services  effectively. 


Mitiaation  Steers 

Step 

Mitigation 

Due  Date 

Status 

New  L 

New  C 

Step  Owner 

t 

Establish  0i#ectjve&.  budget  and  stfe-dute. 

VI/2011 

complete 

5 

5 

LQraf 

2 

Finatee  date  and  (inte, 

4/297011 

Complete 

4 

4 

C  Crawford 

3 

So  cue  location 

4/297011 

Complete 

4 

4 

D.  Whitehurst 

4 

Secure  speakers  and  booth  partaapante. 

m  572011 

In  Progress 

3 

3 

C,  Crawford 

5 

Market  event. 

7/1/2011 

In  Progress 

3 

3 

M.  Russo 

6 

Sel  up  for  event. 

fl/1/2011 

Not  Started 

3 

3 

M.  Russo 

7 

Execute  workshop. 

S/2/20"N 

Not  Started 

2 

2 

SE  Group 

e 

Begin  providing  SE  services  to  new 
customers  as  appUcaMe. 

8/2/2011 

Not  Started 

2 

2 

SE  Group 

Waterfall  Chart  -  Simplified  (Mitigation  Steps  and  RiskWeight) 


Point?  (White -Not 
Started,  GraWn 
Proofs *s, 

SE  Workshop 
•  Mitigatipp 
Plan 


Mitigation  Stops 
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Issue  Management  is  a  natural  progression  of  risk  management  as 
risks  that  are  not  successfully  mitigated  become  issues. 

It  is  important  to  determine  a  way  to  formally  manage  program  risks 
in  order  to  focus  efforts  on  top  issues,  communicate  those  issues  to 
decision  makers  and  stakeholders  in  a  timely  fashion,  and  create 
corrective  action  plan  paths  forward  to  resolve  them. 


The  Issue  Recon  Database  is  tired  to  Risk  Recon  and  allows  for 
seamless  traceability  of  risks,  mitigation  plans,  issues  and  corrective 
action  plans. 


This  allows  the  organizations  using  it  to  prioritize  their  work  and 
resources  for  both  risk  and  issues. 
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Create  a  new  issue  for  project:  test 

Workflow  Location:  Pre-Workflow  state,  save  first 


Back  fc>  the  HumE  Page 


!  SavE  Cancel 


Issue  Info  Sheet  Documents  Corrective  Action  Team  Corrective  Action(s)  Related  Projects  Issue  Lifecycle 

\ i_ 1  1 1 


^r 


[Changes  must  be  Saved  first  before  navigating  off  this  web  page 

Issue  Analysis  (Click  bar  to  expand/contract) 


Issue  ID: 

User  Defined  Issue  ID: 
Issue  Title: 

Status 


Urgent: 


Check  to  alert  APM/DPM  of  time 
sensitive  issue 


Date  Initiated: 

Last  Saved  On  Date: 


Estimated  Closure  Date: 


Baselined 


Baselined 

Candidate 

Rework 

In  APM  Review 
In  PM  Review 
Closed 


For  the  Issue 
Status,  the  IPT  has 
proposed  the 
following  status 
options,  listed  in 
the  shown 
dropdown. 


Unclassified 
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Issue  Info  Sheet  (cont) 


'■  J  Logistics 

Create  a  new  Issuefor  proji 
WorkflOW  Location:  Pre-V\  Engineering 

Contracting 

□  Test  &  Eva  I, 

!  _i  ArqLikitinrn 

(Zl  Safety 


Back  to  the  HumE  Page 


SavE  Cancel 


Issue  Info  Sheet 


"V 


Documents 


;tion(s)  Related  Projects 


Issue  Lifecycle 


j  Changes  must  be  Saved  first  b 

1  Resource  Mgmt/  Finance 

Issue  Analysis  (Click  bar  to  expand/c( 

H  Program  Management 

Issue  ID: 

1  1  Business  Mgmt 

For  the  Functional  Group  pull  down,  a  free  form  text  field 
(that  would  appear  only  if  at  least  one  functional  group 
box  is  checked)  is  requested  to  permit  decomposition. 

For  examDle.  loaistics  could  break  down  into  SDares. 

User  Defined  Issue  ID: 

1  1  Configuration  Mgmt 

Issue  Title: 

□  Technical  Mgmt 

Status 

i  1  International  Programs 

transportation,  sustainment,  convoys,  etc. 

Others  may 

Urgent: 

Check  to  alert  APM/DPM  of  time 
sensitive  issue 

i.  J  Fabrication 
□  Training  -  ONLY  FOR 

include  depots,  FOBs,  HHQ,  AMC,  ASA(ALT),  ATOs, 

TTPs,  etc. 

TRAINING  USE 

Date  Initiated: 

□  Legal  / 

Last  Saved  On  Date: 

LI  Security  / 

Due  Date: 

L  J  Req  u  i  rem  ents  M  a  n  a  g  em  ent  / 

Estimated  Closure  Date: 

|_|  V6.3  Test  Functional  Group  / 

Functional  Groups: 

Functional  Groups...|  T  Sub  Group:  ^ 

Unclassified 
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Issue  Impacts: 


Issue  Impacts 

KPP/KSA  Comms  Maintainability  Transportability  Mobility 

DOTLPF  .  Consumption  Force  Protection  J  Op  Effectiveness  Lethality 

Performance; 

Power  Survivability  i  Network/C4I  Reliability 

OtKen 

□ 

Nested  check  boxes  to  show  further  granularity  to  describe  impacts. 
“Nested”  means  optional  check  boxes  only  appear  when  the  main 
impact  (Cost/Schedule/Performance)  is  checked. 
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This  is  a  tab  with  more  fields  to  define  complex  corrective  actions  vs.  a  simple  issue 
resolution.  This  tab  does  not  have  to  be  used.  Later  increments  could  include  links  to 
root  cause  methods.  The  pull  down  help  menu  will  have  reference  documentation 
available  for  root  cause  determination. 
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Corrective  Action  Status 


Risk  Management  as  an  Integrated  Approach. 
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Resources 


Risk  Management  Guide  for  DOD  Acquisition, 

http://www.acq.osd.mil/sse/docs/2006RMGuide4Aug06finalversion.pdf 

•  Risk  Recon  : 

-  To  set  up  training  on  how  to  use  Risk  Recon,  or  to  get  your 
program  set  up  to  use  the  tool,  contact: 

•  Becky  Addis  -  586-214-2582  -  rebecca.l.addis.civ@mail.mil 

•  Lisa  Graf  -  586-306-2572  -  Iisa.i.qraf2.civ@mail.mil 

•  Issue  Management  IPT: 

-  To  join  the  Issues  Management  IPT  or  to  use  the  Issues  Management 
tool  starting  March  2012,  contact: 

•  Dawn  Packard  -  586-282-8827  -  dawn.m.packard2.civ@mail.mil 

•  FMEA  Training: 

•  Kadry  Rizk  -  586-282-5403  -  kadrv.w.rizk.civ@mail.mil 

•  Gregor  Rataczak  -  586-282-4618  -  qreqor.a.rataczak.civ@mail.mil 


Unclassified 
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